Similar to SMS login: have the option for email login to generate a pin that the user is forced to use in order to validate the email address.